1.Where CoreSync runs#
CoreSync's application servers, databases and RADIUS servers run on infrastructure Avitech operates in Nairobi, Kenya. That hosting isn't outsourced, so it isn't a sub-processor.
2.Our sub-processors#
| Provider | What they do for CoreSync | Personal data involved | Location |
|---|---|---|---|
| Cloudflare, Inc. | DNS for our domains, and network protection for coresync.africa | IP addresses and request details of website visitors | Global network, United States headquarters |
| Signally | Sending email from CoreSync, such as invoices, receipts and alerts | Recipients' names and email addresses, and the message content | Details on request |
| Zoho Corporation (ZeptoMail) | Backup email delivery, used only if our main email provider is unavailable | Recipients' names and email addresses, and the message content | United States |
| DeepSeek | The AI model behind the CoreSync AI assistant, used only when someone asks the assistant a question | The question asked, and the records the assistant reads to answer it, which can include subscriber details | China |
| Mapbox, Inc. | Maps in the admin portal, such as the network and infrastructure map | IP addresses of users loading maps, and the map areas viewed | United States |
3.Services you connect#
Some integrations run on your own accounts with other companies. They're your service providers, chosen and contracted by you, not our sub-processors, and their own terms and privacy policies apply. CoreSync exchanges data with them on your instructions.
| Service | What it's for |
|---|---|
| Safaricom M-Pesa (Daraja) | STK push payment requests, and paybill and till payment notifications |
| KopoKopo | Payment collection and notifications |
| Banks, such as Co-operative Bank | Bank payment notifications |
| SMS gateways: Advanta, Africa's Talking, BlessedTexts, Celcom Africa, HostPinnacle, Onfon, TalkSasa, TextSMS | Sending SMS to your subscribers under your Sender ID |
| Your own AI provider key (OpenAI, Anthropic or DeepSeek), if you add one | Answering AI assistant questions on your account instead of ours |
| Your routers, OLTs and ONUs | Network access control and device management |
4.Changes to this list#
We'll update this page, and give ISP account owners at least 14 days' notice by email, before a new sub-processor starts processing personal data, as the Data Processing Agreement sets out.
Questions about this document? Write to us and we'll explain anything that isn't clear.
Email hello@coresyncisp.com